Get started with Wazuh

Follow these steps to download the latest stable version of Wazuh and get started.

  1. Install the Wazuh server

    The Wazuh server analyzes the data received from the agents. A single Wazuh server can analyze data from thousands of agents, and scale horizontally when configured in cluster mode.

  2. Install the Wazuh agent

    The Wazuh agent detects threats and triggers automatic responses when necessary.

    The agent has several capabilities, including log and event collection, active response, file and registry key monitoring, detection of rootkits or malware artifacts, among others.

  3. Integration with Elastic Stack

    Alerts generated by Wazuh are sent to Elastic Stack, where they are indexed and stored. The unique integration between Wazuh and Kibana provides a powerful user interface for data visualization and analysis.

Deployment options

Ready to start securing your systems with Wazuh?

Our core is open source. If you have questions about the installation process,
our contributors and developers will be happy to help you.